SUSE-SU-2025:02136-1: kernel-livepatch-SLE15-SP3_Update_49&distro=SUSE Linux Enterprise Live Patching 15 SP3 SUSE Linux Enterprise

Published

Published 26-06-2025Last modified 04-02-2026

Vulnerability summary

SUSE-SU-2025:02136-1 is a vulnerability in kernel-livepatch-SLE15-SP3_Update_49&distro=SUSE Linux Enterprise Live Patching 15 SP3 SUSE Linux Enterprise with no CVSS score yet.

Overall risk

0/100

0100

Minimal · default modelHow is this calculated?

CVSS score

Not scored

010

No CVSS score recorded

EPSS scoreNot scoredRisk metrics not yet published.

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 7 · Downstream 0 · Related 7

CVE-2022-49545 CVE-2024-50125 CVE-2024-50127 CVE-2024-50279 CVE-2024-50301 CVE-2024-56601+1 more

Timeline

26-06-2025
PublishedVulnerability first disclosed.
04-02-2026
Last modifiedVulnerability information updated.

Description

Security update for the Linux Kernel (Live Patch 49 for SLE 15 SP3) This update for the Linux Kernel 5.3.18-150300_59_179 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233708). - CVE-2024-50301: security/keys: fix slab-out-of-bounds in key_task_permission (bsc#1233680). - CVE-2024-50127: net: sched: fix use-after-free in taprio_change() (bsc#1232908). - CVE-2024-56605: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (bsc#1235062). - CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (bsc#1232929). - CVE-2022-49545: ALSA: usb-audio: Cancel pending work at closing a MIDI substream (bsc#1238730).